An Application Profile defines the client application that will consume services provided by the Service Providers.
A single Application Profile can be assigned to multiple Service Domains.
The following topics include information on how to define Application Profiles:
You can create an application profile from the Mobile and Social Services configuration page.
The Application Profiles Configuration page displays.
Table 49-15 Application Profile General Properties
The value must be a unique one that distinguishes the application from all other applications on the server. This value and the application name value embedded in the client application must match.
(Optional) Type a short description that will help you or another Administrator identify this service in the future.
Mobile.clientRegHandle.baseSecret is a mandatory attribute used by the server as a private secret to sign each Client Registration Handle for this application.
userId4BasicAuth is the user ID attribute used by the server and the application to perform HTTP Basic authentication.
sharedSecret4BasicAuth is the shared secret attribute used by the server and application to perform HTTP Basic authentication.
Jailbreak Detection - Select the Enabled box to activate Jailbreak Detection for this application, or clear the box to disable it. If Jailbreak Detection is grayed out, the Jailbreak Detection Policy is disabled in Mobile and Social.
Mobile Configuration - Select this option to expose additional mobile configuration settings on the Application Profile Configuration page.
See Editing or Deleting an Application Profile for information about properties that you can configure only after you have already created an Application Profile.
You can edit or delete an Application Profile.
To edit or delete an Application Profile:
When you edit a User Profile Service Provider that you or another Administrator has already created, the additional Application Profile properties appears.
The additional Application Profile properties are as follows:
Profile Cache Duration - The maximum amount of time that the Application Profile details cached on the mobile device will remain valid. If the time is elapsed when the mobile client application requests the Application Profile, the cached Profile is replaced with a freshly downloaded version. If the time is not elapsed, the cached Profile is used.
Authentication Retry Count - The maximum number of retries that a User is allowed if invalid credentials are provided during registration/authentication. This setting is not honored in the iOS Mobile SDK.
Offline Authentication - Select the Allowed box to allow users to log in and authenticate to the application locally. Clear the box to block users from authenticating locally.
Claim Attributes - The set of attributes that will be fetched from the device and passed to the server during registration/authentication.
Social Identity WebView - Choose Embedded if users should be presented with the Mobile and Social login page inside the application using the embedded WebView class, or choose External if the login page should be presented in an external browser.
Platform Specific Settings
URL Scheme - Type the URL scheme that is used to invoke this mobile client application, as configured in the application itself.
Apple iOS Bundle ID - Type the unique Bundle ID that is configured in the mobile client application. Each iOS mobile application has a unique Bundle ID.
Android Package - Type the fully qualified name of an activity in the Android application. This activity should have
<data android:scheme="xyz" /> in its
scheme (xyz) should be the same as the URL scheme.
For details regarding the
<data> element, please see the following web page:
Android Application Signature - Enter the signature of the Android application. You can obtain the signature from the certificate with which the application is signed. On Linux, you can obtain the signature using the following command:
keytool -exportcert -alias
| xxd -c 256 -ps
The signature obtained using the above command will have a carriage return after 256 characters. Remove it before entering the signature in this field.
You can also retrieve the signature programmatically.
See "Invoking the Mobile Single Sign-on Agent App" in the Oracle Fusion Middleware Developer's Guide for Oracle Access Management.
Custom Settings / Mobile Custom Attributes - Configure attributes or properties specific to the mobile client application. Mobile Custom Attributes are returned by the server to the mobile application as part of the Application Profile